Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83F1F1C03EDD11F1A93A110DCF1D38B0.roa
File: 83F1F1C03EDD11F1A93A110DCF1D38B0.roa (raw, json)
Hash identifier: MnzgUFeQDGu7MIDcsjiu8vnt5TcHLXU6qj39TwlGE7k=
Subject key identifier: 97:B4:78:30:36:BE:16:CF:BF:96:E6:C0:88:27:1C:B7:AE:01:76:1F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C6BD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83F1F1C03EDD11F1A93A110DCF1D38B0.roa
Signing time: Thu 23 Apr 2026 06:27:35 +0000
ROA not before: Thu 23 Apr 2026 06:27:30 +0000
ROA not after: Thu 30 Apr 2026 06:27:30 +0000
asID: 139880
IP address blocks: 154.82.32.0/19 maxlen: 24
154.209.160.0/19 maxlen: 24
154.214.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 29 Apr 2026 00:07:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116413 (0x1c6bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 06:27:30 2026 GMT
Not After : Apr 30 06:27:30 2026 GMT
Subject: CN=69e9bbd7-ef07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3d:1d:9b:40:10:4b:8f:f3:dd:36:9c:e0:f9:
59:7a:c5:35:f0:b8:ca:13:8e:10:94:76:c0:22:5f:
34:8e:f2:82:f6:ea:75:84:c4:dc:da:0c:e5:30:37:
c0:45:ce:1f:87:e1:cc:bc:06:f7:81:a7:7d:42:25:
41:fa:10:eb:bc:b9:c5:b3:e4:86:0a:54:6a:41:d2:
40:f6:cc:18:2d:d1:aa:47:fe:bf:43:6c:4f:3c:09:
d8:e2:da:d2:21:c2:9c:77:a2:2b:82:06:bc:59:29:
67:6b:f8:c2:b8:85:0b:8f:90:18:6e:dc:c4:e1:57:
11:f2:9b:c9:cd:45:ec:3d:67:75:87:6b:e5:be:26:
c2:04:15:14:0e:7d:c0:79:e4:c9:2b:1f:52:a4:c6:
f9:35:89:5b:be:20:b9:3e:36:72:07:10:a3:a8:9e:
b5:da:82:59:2d:70:cd:b5:7b:cb:81:7f:b0:7d:48:
71:72:61:4f:ea:80:75:1a:91:1c:de:b9:31:f9:67:
8c:af:74:b7:34:ab:f4:9d:c3:b3:7f:54:56:c7:82:
17:40:c2:4b:79:71:4d:b0:d1:d1:fc:8d:ac:be:95:
5d:cd:99:3d:cd:89:89:d8:ad:7b:5a:7e:93:29:a8:
91:46:ea:da:08:fe:7f:3b:54:69:03:84:39:8b:d3:
eb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B4:78:30:36:BE:16:CF:BF:96:E6:C0:88:27:1C:B7:AE:01:76:1F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83F1F1C03EDD11F1A93A110DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.32.0/19
154.209.160.0/19
154.214.64.0/18
Signature Algorithm: sha256WithRSAEncryption
ab:be:45:b1:2a:87:5b:7a:67:5a:1c:47:e3:27:59:5e:80:80:
7a:ba:2f:88:05:cf:10:fa:44:b5:e0:e5:98:5d:b2:d2:22:94:
98:19:f6:e6:f4:55:bb:7e:5f:0c:bf:07:e7:03:48:8f:95:98:
5e:97:ce:ee:9c:24:6c:db:5d:cc:42:66:8c:c1:c8:a9:7c:15:
9b:24:30:23:97:18:3c:f6:8d:59:68:d1:ce:51:7d:af:d1:c0:
14:a9:a0:f5:8d:8e:e9:26:94:43:09:23:15:b8:07:ec:eb:a5:
6f:af:33:4c:e4:a2:44:23:ab:e6:52:fb:39:28:7f:66:32:b1:
65:cb:4b:78:4a:e6:b6:da:f5:7b:c1:c1:6c:06:c8:9d:65:c9:
c4:75:52:2c:41:66:2c:5c:74:d9:81:ba:c8:16:7b:68:dc:a4:
de:03:39:0f:ff:4b:aa:fd:0c:76:99:41:e9:f9:fe:4c:40:06:
7b:96:f6:53:5a:69:26:cf:72:89:fa:c0:a5:4f:3b:66:20:61:
49:9a:9a:7b:17:fd:24:91:e0:50:b4:d9:f5:26:3a:e1:8b:88:
96:aa:06:c0:ed:86:7c:3d:a1:47:ca:53:b5:5d:53:3c:4b:c5:
2a:c4:1e:97:46:98:75:2f:0b:99:f7:a3:39:94:ff:8a:75:7b:
81:69:2f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:33:44 2026 by rpki-client